Takashi Kojo
2069394386
benchmark.c: cert file name
2014-05-01 15:26:55 +09:00
Takashi Kojo
3de36b106e
Merge remote-tracking branch 'CyaSSL-master/master' into IAR
2014-05-01 14:33:49 +09:00
Takashi Kojo
169c0eee20
IAR EWARM project: test, benchmark
2014-05-01 14:29:09 +09:00
John Safranek
fb5200aa95
1. Added more options to the full commit test.
...
2. Cleanups from static analysis.
2014-04-30 15:01:10 -07:00
John Safranek
09a7a087a2
fix static analysis warnings
2014-04-29 14:52:42 -07:00
John Safranek
70dee7e190
Added the directoryName comparison to the name constraint checks.
2014-04-28 13:29:44 -07:00
John Safranek
68878d33d9
Merge branch 'frankencert'
2014-04-28 11:10:37 -07:00
John Safranek
618d282d94
Decodes the Name Constraints certificate extension on the CA cert
...
and checks the names on the peer cert, rejecting it if invalid
based on the name.
2014-04-28 11:03:24 -07:00
Takashi Kojo
6cf1c8149b
AesCbcEncrypt/Decrypt return value
2014-04-28 10:52:35 +09:00
Takashi Kojo
f9ad1888cb
Fixed pic32mx/mz clock for benchmark
2014-04-28 10:51:18 +09:00
Takashi Kojo
cb70631512
aes.c indentation
2014-04-25 14:18:23 +09:00
Takashi Kojo
11aff767fd
corrected pic32mz header path
2014-04-25 13:50:12 +09:00
Takashi Kojo
e3becc3a65
des3 parity. internal.h to ctaocrypt/types.h
2014-04-25 13:35:35 +09:00
Chris Conlon
f20b25b510
add RSA_DECODE_EXTRA to RsaPublicKeyDecode() to handle OpenSSL-generated keys
2014-04-23 15:53:20 -06:00
Moisés Guimarães
30b63bda6f
random: InitRng and RNG_GenerateBlock to reduce stack usage: (up to 512 bytes - pointer sizes) moved to the heap.
...
with ARC4
--- InitRng: entropy variable moved to the heap; (256 bytes)
--- RNG_GenerateBlock: entropy variable moved to the heap; (256 bytes)
without ARC4
--- InitRng: key variable moved to the heap; (32 bytes)
--- InitRng: junk variable moved to the heap; (256 bytes)
2014-04-23 16:06:14 -03:00
Moisés Guimarães
6e3349f8ec
fix code format, only spaces added, no code has been modified.
2014-04-23 11:58:44 -03:00
Moisés Guimarães
ce655f61c5
ecc: ecc_make_key_ex, ecc_export_x963, accel_fp_mul, accel_fp_mul2add, ecc_encrypt and ecc_decrypt refactory to reduce stack usage: (1350 bytes - pointer sizes) moved to the heap.
...
--- ecc_make_key_ex: buf variable moved to the heap; (66 bytes)
--- ecc_export_x963: buf variable moved to the heap; (256 bytes)
--- accel_fp_mul: kb variable moved to the heap; (128 bytes)
--- accel_fp_mul2add: kb variable moved to the heap; (256 bytes)
--- ecc_encrypt: sharedSecret and keys variables moved to the heap; (66 + 256 bytes)
--- ecc_decrypt: sharedSecret and keys variables moved to the heap; (66 + 256 bytes)
2014-04-23 11:44:54 -03:00
Takashi Kojo
a67cb1207b
ColdFire SEC for aes, des3: Eliminated type mismatch
2014-04-23 20:45:19 +09:00
Takashi Kojo
41199a480d
ColdFire SEC, fix cache control in aes, des3 driver
2014-04-23 16:56:37 +09:00
Moisés Guimarães
fc24dca12d
fix code format, only spaces added, no code has been modified.
2014-04-21 14:55:43 -03:00
Moisés Guimarães
eaaf0a7c28
pwdbased: PBKDF2 refactory to reduce stack usage: (up to 64 bytes - pointer size) moved to the heap.
...
--- buffer variable moved to the heap; (up to 64 bytes)
--- returns changed to breaks
pwdbased: PKCS12_PBKDF refactory to reduce stack usage: (up to 1023 + 128 bytes - pointer sizes) moved to the heap.
--- staticBuffer variable changed to have size = 1 byte (1023 bytes saved)
--- Ai variable moved to the heap; (up to 64 bytes)
--- B variable moved to the heap; (up to 64 bytes)
hmac: HKDF refactory to restore previous behavior inside while loop.
2014-04-21 14:45:07 -03:00
Moisés Guimarães
6d0fbfe7e9
hmac: HKDF refactory to reduce stack usage: (up to 128 bytes - pointer sizes) moved to the heap.
...
--- tmp variable moved to the heap; (up to 64 bytes)
--- prk variable moved to the heap; (up to 64 bytes)
2014-04-21 11:31:42 -03:00
Moisés Guimarães
ac56927e20
CYASSL_SMALL_STACK build option (default enabled)
2014-04-16 13:25:51 -03:00
Moisés Guimarães
48af915a35
fix camellia memory leak
2014-04-15 14:06:13 -03:00
Moisés Guimarães
69890dd023
blake2b: blake2b_init_key and blake2b_compress refactory to reduce stack usage: (384 bytes - pointer sizes) moved to the heap.
...
--- block variable moved to the heap; (128 bytes)
--- m and w variables moved to the heap; (256 bytes)
--- chain of dependency updated to propagate the error.
2014-04-15 12:46:43 -03:00
Moisés Guimarães
8d8fca67c3
SHA256, SHA384 and SHA512 error propagation. Major impact on random functions with error propagation.
2014-04-14 21:39:14 -03:00
Moisés Guimarães
32e2d7016f
SHA256, SHA384 and SHA512 error propagation. Major impact on Hmac functions with error propagation.
2014-04-14 21:36:04 -03:00
Moisés Guimarães
644bb9c524
SHA256, SHA384 and SHA512 error propagation. Minor impact on some of internal.c static functions.
2014-04-14 21:28:23 -03:00
Moisés Guimarães
45f9f3cdc2
SHA256, SHA384 and SHA512 error verification on test files.
2014-04-14 21:28:22 -03:00
Moisés Guimarães
329cd0b241
sha256: XTRANSFORM refactory to reduce stack usage: (256 bytes - pointer size) moved to the heap.
...
--- W variable moved to the heap;
--- return type changed to int, returning 0 for success;
--- chain of dependency updated to propagate the error in Sha256Update and Sha256Final functions.
sha512: Transform and Transform384 refactory to reduce stack usage: (128 bytes - pointer size) moved to the heap in each function
--- W variable moved to the heap;
--- return type changed to int, returning 0 for success;
--- chain of dependency updated to propagate the error in Sha512Update, Sha512Final, Sha384Update and Sha384Final functions.
2014-04-14 21:28:22 -03:00
Moisés Guimarães
41cc5f06e4
camellia_setup128 and camellia_setup256 refactory to reduce stack usage:
...
--- subL and subR variables moved to the heap;
--- return type changed to int, returning 0 for success;
--- chain of dependency updated to propagate the error in CamelliaSetKey function.
2014-04-14 21:28:22 -03:00
Chris Conlon
be65f5d518
update FSF address, wolfSSL copyright
2014-04-11 15:58:58 -06:00
John Safranek
421c08fc61
Merge branch 'frankencert'
2014-04-11 10:01:03 -07:00
Takashi Kojo
b712380a60
Sync MDK5 Software Pack with 2.9.4
2014-04-11 16:20:12 +09:00
John Safranek
e79ce42ef4
Added checking of the key usage and extended key usage extensions in the
...
certificates.
2014-04-10 16:50:14 -07:00
toddouska
b59b3d7c36
remove unused blake2b helper f()s
2014-04-07 11:35:13 -07:00
toddouska
5a70aba3bc
fix InitSha
2014-04-04 15:37:04 -07:00
toddouska
562b017776
user settings, custom rand gen, by tyto diff
2014-04-04 15:10:08 -07:00
Chris Conlon
c4f483aaa2
Fix order of GenerateSeed() when MQX is used with leanPSK
2014-04-04 12:37:22 -06:00
toddouska
6504d605a0
fix des malloc cast
2014-04-01 14:02:36 -07:00
toddouska
c210600d93
RSA fips mode
2014-04-01 13:08:48 -07:00
toddouska
4ba587b18a
Merge branch 'master' of github.com:cyassl/cyassl
2014-04-01 12:06:48 -07:00
John Safranek
1f3bc9263d
error to have v1 or v2 certificates with extensions
2014-03-28 11:25:05 -07:00
Moisés Guimarães
bbc9c53b90
fix error include
2014-03-28 14:01:10 -03:00
Moisés Guimarães
6b9f711de0
DesSetKey refactory to reduce stack usage:
...
--- buffer variable moved to the heap;
--- return type changed to int, returning 0 for success;
--- chain of dependency updated to propagate the error.
2014-03-28 12:59:39 -03:00
toddouska
05b132ce1c
HMAC fips mode
2014-03-27 15:43:54 -07:00
toddouska
7dd265cf2e
SHA384 fips mode
2014-03-27 14:37:37 -07:00
toddouska
e873d7998b
SHA512 fips mode
2014-03-27 14:03:12 -07:00
Chris Conlon
74a6916606
remove fips file stubs
2014-03-27 12:47:38 -06:00
Chris Conlon
62b8abafc5
fix variable shadow warning in asn.c
2014-03-26 23:43:44 -06:00
Chris Conlon
9d74775934
add fips file placeholders
2014-03-26 23:40:07 -06:00
toddouska
717f3adb47
fix item 9 from report by Ivan Fratric of the Google Security Team
2014-03-26 13:28:19 -07:00
toddouska
d5be4c4663
SHA-256 fips mode
2014-03-25 17:11:15 -07:00
toddouska
18d178f325
add ShaFinal fips mode
2014-03-25 16:20:03 -07:00
toddouska
b41186a6dd
Merge branch 'master' of github.com:cyassl/cyassl
2014-03-25 16:02:12 -07:00
toddouska
3607db9077
add SHA1 fips mode
2014-03-25 16:01:17 -07:00
toddouska
b6fc109c1d
add ecc_ctx_reset() so user can reuse ctx w/o init/free
2014-03-25 12:48:25 -07:00
toddouska
fb6d671629
resolve pull request merge conflict
2014-03-25 11:39:07 -07:00
toddouska
0ea10a4388
add 3DES fips mode
2014-03-24 13:37:52 -07:00
John Safranek
e19e2a801d
Ext Key Usage
...
1. Store reference to raw EKU OIDs in the DecodedCert.
2. Fixed usage of the anyEKU.
2014-03-21 09:37:10 -07:00
John Safranek
08ae775406
Merge branch 'master' of github.com:cyassl/cyassl
2014-03-21 09:34:08 -07:00
toddouska
98c6e3f3af
have Base16 Decode on for FIPS tests
2014-03-20 11:38:14 -07:00
toddouska
8bc6bf9424
add lower case support to Base16 decode for better known answer test support, export
2014-03-20 10:31:52 -07:00
John Safranek
1e041abf04
decode Extended Key Usage extension
2014-03-20 10:07:47 -07:00
toddouska
58885b36eb
add AesCbc fips mode
2014-03-19 16:43:52 -07:00
toddouska
388436c53e
add AesSetKey fips mode
2014-03-19 13:56:11 -07:00
toddouska
faecf7f849
require thread local storage for power on self thread check
2014-03-19 10:19:08 -07:00
toddouska
be9451fbc5
rm --cahced didn't work to stop tracking
2014-03-19 09:55:20 -07:00
toddouska
8bbc30f3e1
add fips enable switch
2014-03-19 09:43:57 -07:00
toddouska
90b08761c4
fix benchmark output with 3 decimals
2014-03-18 12:28:54 -07:00
John Safranek
ac452eebdc
in DecodeAltNames, skip unknown name types, don't treat as error
2014-03-18 09:24:07 -07:00
John Safranek
bcd7f03495
X.509
...
1. Added stubs for the Extended Key Usage and Inhibit anyPolicy
extensions.
2. Key Usage extension is decoded normally.
3. Certificate Policy extension is noted normally.
2014-03-14 15:48:33 -07:00
toddouska
b56ecd1842
add enable-iopool , simple I/O pool example using memory overrides
2014-03-13 18:54:51 -07:00
John Safranek
4724c23a05
added critical extension error to error strings
2014-03-13 11:15:16 -07:00
John Safranek
1c35e5929a
Merge branch 'master' of github.com:cyassl/cyassl
2014-03-12 15:41:40 -07:00
John Safranek
dc14fafb2e
reversed a change to clear a warning, replaced some tabs
2014-03-12 14:32:02 -07:00
John Safranek
dcb39d5554
bug fixes
2014-03-12 05:50:37 -07:00
John Safranek
92c31d81f9
X.509 with unsupported critical extensions should be rejected
2014-03-11 11:50:45 -07:00
John Safranek
65475fdfe3
Merge branch 'PIC32MZ' of github.com:kojo1/cyassl-test into kojo1-PIC32MZ
...
Conflicts:
ctaocrypt/benchmark/benchmark.c
2014-03-11 09:54:36 -07:00
John Safranek
6f55549fed
fixes for Xcode 5.1, clang 503.0.38 stricter with some warnings
2014-03-11 09:38:36 -07:00
Takashi Kojo
e02fa2c571
random.c, indentation
2014-03-11 13:53:37 +09:00
Takashi Kojo
5dbe391d92
sha256.c, mplabx/test_main.c
2014-03-11 13:43:24 +09:00
Takashi Kojo
6235c949b3
PIC32MZ
2014-03-11 11:32:16 +09:00
Takashi Kojo
a9ca608030
Sync with CyaSSL master
2014-03-11 11:22:39 +09:00
Takashi Kojo
3e41d8cecb
Merge branch 'PIC32MZ-HWCrypt'
...
Conflicts:
configure.ac
ctaocrypt/benchmark/benchmark.c
ctaocrypt/src/asn.c
ctaocrypt/src/coding.c
ctaocrypt/src/des3.c
ctaocrypt/src/md5.c
ctaocrypt/src/random.c
ctaocrypt/src/sha.c
ctaocrypt/src/sha256.c
cyassl/ctaocrypt/aes.h
cyassl/ctaocrypt/settings.h
cyassl/ssl.h
cyassl/version.h
examples/server/server.c
m4/ax_debug.m4
m4/ax_tls.m4
mplabx/benchmark_main.c
mplabx/ctaocrypt_test.X/nbproject/configurations.xml
mplabx/test_main.c
src/io.c
src/ocsp.c
src/ssl.c
src/tls.c
testsuite/testsuite.c
2014-03-11 10:11:36 +09:00
Takashi Kojo
8ea2eec773
Merge https://github.com/cyassl/cyassl
2014-03-11 09:55:57 +09:00
Takashi Kojo
a12fe60723
Add AES-Counter to benchmark.c
2014-03-10 10:46:40 +09:00
Takashi Kojo
e5a51ca516
PIC32MZ Crypt Engine
2014-03-04 22:10:19 +09:00
Takashi Kojo
f5922255b0
Catching up 2.9.0
2014-03-04 22:09:38 +09:00
toddouska
f1597c86b1
fix clang -Wconversion except -Wsign-conversion
2014-03-03 16:46:48 -08:00
toddouska
1fd6245600
fix all clang warnings except Wpadded (diagnostic), Wconversion which inludes Wsign-conversion (implicit conversions part of standard)
2014-03-03 13:27:52 -08:00
John Safranek
ec7c79c12e
fix a couple more uninitialized variables
2014-03-02 18:38:12 -08:00
toddouska
a50d2e1e21
fix -Wcast-align
2014-03-02 11:47:43 -08:00
toddouska
f0f6497526
fix -Wconditional-uninitialized
2014-03-02 11:11:39 -08:00
toddouska
7b00374930
fix -Wmissing-variable-declarations
2014-03-02 11:06:41 -08:00
toddouska
ac7cb3c8aa
add -Wunreachable-code
2014-02-24 11:15:22 -08:00
toddouska
45859e97bf
fix arm thumb mode assembly
2014-02-18 16:45:43 -08:00
Chris Conlon
cf6eaf219a
tyto build - add GenerateSeed, exclude ctype.h, test.h
2014-02-12 13:39:38 -07:00
John Safranek
f1c2250652
fix static analysis warning, g++ compile warning
2014-02-07 14:52:44 -08:00
John Safranek
f669e73c8d
Merge branch 'master' of github.com:cyassl/cyassl
2014-02-03 14:49:38 -08:00